Draft — pending legal review
This text describes how AdvoLevel works today and has not yet been approved by counsel. Draft of Oct 23, 2026.
Privacy Policy
This policy explains what AdvoLevel collects, how we use it, who helps us run the service, and the choices your organization has. AdvoLevel is owned by The Well Community Development Corporation (“we”, “us”). Questions: hello@advolevel.com.
What we collect
- Account details: your name, email address and password (stored only as a one-way hash), your two-step verification setting (the secret is encrypted), and your Google name and email address if you sign in with Google.
- Your organization’s information: Organization DNA, documents and recordings you upload or import, conversations with executives, boardrooms, cases, tasks, decisions, memories, content drafts, and Organizational Twin records. People records in the Twin hold a name, role and weekly capacity only.
- Connected tools: when an owner or admin connects ClickUp, GoHighLevel, Google Drive, Dropbox or LinkedIn, we store the access tokens (encrypted) and the records needed for the work you ask for, such as imported files, tasks and contacts.
- Billing: your plan, add-ons and Stripe customer and subscription references.
- Records of activity: an audit trail of sign-ins, approvals, actions and settings changes, and technical logs. Logs carry identifiers and never the content of your documents or messages.
How we use it
- To run AdvoLevel for your organization: answering questions, preparing work, running the actions your people approve, and sending account emails such as verification codes, invitations and billing notices.
- To keep the service secure, fix problems and enforce plan limits.
- We never sell your data, use it for advertising, or use one organization’s information to answer another organization’s questions.
Each organization’s data stays separate
Every organization is a separate tenant. The database enforces the separation with row-level security on every organization’s records, files are stored in a folder per organization that the application checks on every read and write, and search indexes are built per organization. AdvoLevel staff see an organization’s content only while that organization grants support access, for a limited time, and each grant and view is recorded in the organization’s audit trail.
AI providers and your controls
Executives are AI models provided by Anthropic and, optionally, OpenAI. Anthropic is the default. Every executive answer records which provider and model wrote it. An organization owner can limit which AI providers may see the organization’s information in Settings › Data policy. Today that limit applies to executive answers; boardroom summaries, Content Factory drafts and building the search index do not yet follow it, and we will update this policy when they do. Executives propose actions; nothing runs in a connected tool until a person with the right role approves it, unless your organization sets its own rule to allow that action.
Service providers we use
| Provider | What it does for AdvoLevel | What it receives |
|---|---|---|
| Amazon Web Services (AWS) | Hosting: application servers, the database, file storage and outgoing email | Everything AdvoLevel stores, in the United States (us-east-1) |
| Anthropic | AI provider: writes executive answers, boardroom summaries and drafts. The default for every organization | The question and the parts of your organization’s information needed to answer it |
| OpenAI (optional) | AI provider: builds the search index for your documents when AdvoLevel turns it on, and writes answers, summaries and drafts only once its model has passed AdvoLevel’s executive evaluation | Document text for indexing; the question and needed context for answers |
| Stripe | Payments and subscriptions | Billing contact, plan and payment details. Card numbers go to Stripe directly and AdvoLevel never sees them |
| Deepgram | Transcription for the Content Factory | Audio and video your organization uploads for transcription |
| Sign in with Google (if you choose it) and the fonts used on these pages | Your Google account name and email address; your IP address when these pages load fonts | |
| Sentry (if enabled) | Error reports so we can fix problems | Technical error details with secrets, cookies and request bodies removed |
Connected tools (ClickUp, GoHighLevel, Google Drive, Dropbox, LinkedIn) receive information only when your organization connects them and an approved action sends it, under your own agreement with each tool.
How long we keep it
- Your organization’s information stays until you delete it or close your organization.
- Owners set how long each kind of document is kept (uploads, Google Drive and Dropbox imports, Content Factory sources) in Settings › Data policy; documents are deleted automatically when that time is up.
- Deleting a document removes its file and removes it from every future answer. Memories can be edited or forgotten at any time.
- The audit trail is kept for the life of the organization and cannot be changed by the application.
- Database backups are kept for 14 days, and earlier versions of deleted files for 30 days, then they are removed.
Security
Connections use HTTPS. The database and file storage are encrypted at rest, and access tokens for connected tools and two-step secrets are encrypted again by the application. Owners must use two-step verification, and sensitive changes such as billing, deleting documents, changing approval rules or making someone an owner ask for a fresh two-step code.
Cookies
AdvoLevel uses one cookie to keep you signed in, and one to remember the language you choose. We use no advertising or analytics cookies.
Your choices and rights
Owners and admins can see, correct and delete their organization’s information in the app, and export Content Factory drafts. To get a copy of your information, close your organization and delete its data, or ask any privacy question, write to hello@advolevel.com. Depending on where you live, you may have further rights under local law; tell us and we will help.
Children
AdvoLevel is a service for organizations and their staff and is meant for adults.
Changes
When this policy changes, we will update the date at the top and tell organization owners about meaningful changes before they take effect. See also the Terms of Service.